Security & Testing MCP Servers

MCP servers for security scanning, vulnerability testing, secrets management and QA automation. Each entry is scanned with the deterministic Capability-Flow Trust Model — grades are computed, never self-reported.

Zfuzz Source verified npm
A
@zfuzz/mcp

Security copilot for your IDE. SAST, SCA, secrets, threat modeling — right where you code. Rust-native, zero config, runs 100% locally.

Security & Testing Score 100/100 0 findings 18/wk Cap. Minimal
Konsulto Source verified npm
A
@konsulto/mcp

Konsulto MCP server — drive the Konsulto cybersecurity audit platform from MCP-capable clients (Claude Code, etc.)

Security & Testing Score 100/100 1 finding 17/wk Cap. Minimal
Zephyr Source verified 3 implementations
A
best: @pabloveintimilla/zephyr-mcp

Read-only MCP server for reviewing stories against their Zephyr Scale test coverage.

Security & Testing Best score 100/100 0 findings 17/wk Cap. Minimal
Beyondidentity Source verified npm
A
@beyondidentity/mcp

MCP server for the Beyond Identity public APIs

Security & Testing Score 100/100 0 findings 16/wk Cap. Minimal
Evil Source verified npm
A
@promptfoo/evil-mcp-server

MCP server that simulates malicious behaviors for security testing

Security & Testing Score 100/100 0 findings 16/wk Cap. Minimal
Glin Profanity Source verified npm
A
glin-profanity-mcp

MCP (Model Context Protocol) server for glin-profanity - enables AI assistants like Claude, Cursor, and others to use profanity detection as a tool

Security & Testing Score 100/100 0 findings 16/wk Cap. Minimal
Hundredmen Source verified npm
A
@weave_protocol/hundredmen

Real-time MCP security proxy - intercepts, scans, and gates AI agent tool calls. Now with WARD.md policy enforcement.

Security & Testing Score 100/100 1 finding 16/wk Cap. Minimal
Testledger Source verified npm
A
@testledger/mcp

MCP server for Test Ledger - analyze flaky tests with Claude Code

Security & Testing Score 100/100 0 findings 16/wk Cap. Minimal
Codeguard Source verified npm
A
@isagasi/codeguard-mcp-server

Centralized security instruction server for AI-assisted code generation

Security & Testing Score 100/100 0 findings 15/wk Cap. Minimal
Security Proxy Contracts Source verified npm
A
@0disoft/mcp-security-proxy-contracts

Policy, decision, audit, and validation contracts for MCP Security Proxy.

Security & Testing Score 100/100 0 findings 15/wk Cap. Minimal
Security Proxy Core Source verified npm
A
@0disoft/mcp-security-proxy-core

IO-free policy evaluation, classification, redaction, and audit helpers for MCP Security Proxy.

Security & Testing Score 100/100 0 findings 15/wk Cap. Minimal
Sentinel Solutions Source verified npm
A
sentinel-solutions-mcp

MCP server for analyzing Microsoft Sentinel solutions from any GitHub repository and mapping data connectors to Log Analytics tables

Security & Testing Score 100/100 0 findings 15/wk Cap. Minimal
Test Kits Source verified npm
A
mcp-test-kits

A comprehensive MCP testing server for debugging and testing MCP clients

Security & Testing Score 100/100 1 finding 15/wk Cap. Minimal
Aigently Source verified npm
A
@aigently/mcp-server

MCP server for aigently security guardrails — reads static catalog-data JSON, zero API dependency

Security & Testing Score 100/100 0 findings 13/wk Cap. Minimal
Tensflare Source verified npm
A
@tensflare/mcp

MCP server for Truss — join, list, and verify evidence across participant orgs

Security & Testing Score 100/100 0 findings 13/wk Cap. Minimal
Security Proxy Mcp Adapter Source verified npm
A
@0disoft/mcp-security-proxy-mcp-adapter

JSON-RPC and MCP message adapters for the MCP Security Proxy policy boundary.

Security & Testing Score 100/100 0 findings 12/wk Cap. Minimal
Pentest Source verified 3 implementations
A
best: mcp-pentest

SquatGuard MCP Template for Python

Security & Testing Best score 100/100 0 findings 9/wk Cap. Minimal
Security Proxy Runtime Source verified npm
A
@0disoft/mcp-security-proxy-runtime

Stdio proxy session and subprocess runtime for MCP Security Proxy.

Security & Testing Score 100/100 0 findings 9/wk Cap. Minimal
AgentGrade Remote
A
https://agentgrade.com/mcp

Scan any website for AI agent readiness, payment protocols, and discovery endpoints

Security & Testing Score 100/100 0 findings Cap. Minimal
Aribot Mcp 2 implementations
A
best: https://mcp.aribot.ayurak.com/sse

Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.

Security & Testing Best score 100/100 0 findings Cap. Minimal
Aribot Mcp Remote
A
https://mcp.aribot.ayurak.com/

Governed threat modeling, code threat verification, traceability & compliance, as MCP tools.

Security & Testing Score 100/100 0 findings Cap. Minimal
Dependency Management Mcp Server Remote
A
https://mcp.guide.sonatype.com/mcp

Sonatype component intelligence: versions, security analysis, and Trust Score recommendations

Security & Testing Score 100/100 0 findings Cap. Minimal
Deploy to Agents Remote
A
https://deploytoagents.com/mcp

Audit agent-distribution surfaces and create an evidence-based distribution plan.

Security & Testing Score 100/100 0 findings Cap. Minimal
Directory Remote
A
https://grcmigrate.com/mcp

Search a directory of SOC 2 audit and compliance firms; read GRC migration guides. Read-only.

Security & Testing Score 100/100 0 findings Cap. Minimal